In the Linux kernel, the following vulnerability has been resolved:
io_uring/af_unix: disable sending io_uring over sockets
File reference cycles have caused lots of problems for io_uring in the past, and it still doesn't work exactly right and races with unix_stream_read_generic(). The safest fix would be to completely disallow sending io_uring files via sockets via SCM_RIGHT, so there are no possible cycles invloving registered files and thus rendering SCM accounting on the io_uring side unnecessary.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-livepatch-5.15.145-95.156Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade bpftoolUpgrade python-perfUpgrade kernel-livepatch-5.10.205-195.804Upgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64 | Aug 28, 2024 | May 14, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.72-96.166Upgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel | Feb 17, 2025 | May 8, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 14, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 14, 2024 |
| Suse | — | Upgrade cluster-md-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade kernel-preemptUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-devel-azureUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade dtb-xilinxUpgrade gfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade dtb-apmUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade kernel-default-extraUpgrade dtb-amdUpgrade kernel-64kbUpgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade dtb-appleUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade dtb-lgUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-sourceUpgrade kselftests-kmp-azureUpgrade dtb-socionextUpgrade kernel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-exynosUpgrade kernel-source-rtUpgrade dtb-sprdUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-qcomUpgrade dtb-marvellUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-amazonUpgrade kernel-debug-livepatch-develUpgrade kernel-default-develUpgrade reiserfs-kmp-rtUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-rt_debug-vdsoUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-html | Jun 13, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub